Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS209737.roa
File: AS209737.roa (raw, json)
Hash identifier: vUZWl/znkvt3mE++q3lpX4ez3vLqnph2jQVjMh+jnlw=
Subject key identifier: 6A:F7:DF:57:16:BD:DB:34:00:91:47:5D:B3:7D:3A:4C:20:A7:7F:05
Certificate issuer: /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial: 298ECA49AF63AF364E18BEB75165A845AE368B9C
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS209737.roa
Signing time: Mon 28 Nov 2022 12:18:21 +0000
ROA not before: Mon 28 Nov 2022 12:13:21 +0000
ROA not after: Mon 27 Nov 2023 12:18:21 +0000
asID: 209737
IP address blocks: 191.96.146.0/23 maxlen: 24
191.101.126.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:8e:ca:49:af:63:af:36:4e:18:be:b7:51:65:a8:45:ae:36:8b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Validity
Not Before: Nov 28 12:13:21 2022 GMT
Not After : Nov 27 12:18:21 2023 GMT
Subject: CN=6AF7DF5716BDDB340091475DB37D3A4C20A77F05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ee:a4:64:fe:2b:25:ed:47:6a:b4:47:07:46:
92:14:43:f3:a3:3c:8d:3d:82:a0:ca:85:1a:88:91:
cb:ff:b7:c4:8f:bd:21:7d:20:23:b6:b9:e2:59:c7:
d9:22:44:16:36:dd:3f:27:37:4f:94:08:5a:ff:40:
5f:b6:50:b3:4c:c1:8e:ba:2f:5f:b7:f9:21:e4:68:
2e:c0:3c:8d:48:be:ea:ec:58:d3:64:01:05:c6:de:
d9:88:6a:aa:1f:3e:ba:41:70:ba:da:15:7f:60:ae:
ef:98:d7:b7:f2:a2:25:81:d4:bf:42:0f:ba:10:64:
59:38:71:4c:aa:a8:20:31:d9:f7:42:83:31:0b:2c:
4b:34:da:b8:72:a2:b8:17:e7:e8:e4:c5:22:a6:5b:
77:03:a2:bf:a3:05:cd:be:80:6f:e4:ab:2b:0d:0c:
a2:75:cf:fe:37:3a:bd:a1:fa:39:b2:56:d4:87:1b:
e3:dc:45:e2:b7:1d:50:69:3c:9f:a3:ea:c3:51:ca:
bc:16:50:78:ef:46:29:07:c5:cf:85:4d:ea:f0:cc:
93:03:b4:67:f1:db:24:62:9a:f6:6f:7a:00:e3:59:
0b:6b:02:83:dd:3d:2d:4a:6a:f8:63:32:9d:9c:68:
38:f9:d0:08:9f:72:37:fa:eb:f8:8b:b5:f3:85:5a:
37:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F7:DF:57:16:BD:DB:34:00:91:47:5D:B3:7D:3A:4C:20:A7:7F:05
X509v3 Authority Key Identifier:
keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS209737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.146.0/23
191.101.126.0/23
Signature Algorithm: sha256WithRSAEncryption
50:ac:92:2b:79:b3:fc:53:32:df:4e:ea:be:1d:f4:d4:26:66:
4a:d7:92:34:f3:e7:c9:76:59:82:b0:c1:e1:66:87:2b:1b:85:
c5:dd:7e:eb:5f:01:ee:df:68:20:0c:cd:e8:dc:95:90:9f:0e:
dc:4e:b7:64:b0:11:3e:c4:51:f4:e8:fa:ee:03:13:04:d1:e8:
cb:80:12:40:89:9a:fe:23:c0:f2:de:b0:19:18:02:13:05:e3:
70:9a:97:3f:70:ae:af:1d:38:ef:79:f1:82:31:5e:da:77:03:
a9:14:77:8a:a2:f8:67:4b:00:90:d2:c0:3e:bd:42:fa:5d:47:
c8:c2:c5:88:6a:3d:a1:f2:6e:47:c6:b8:5a:f3:9d:7d:39:11:
60:6a:0d:69:42:52:eb:79:02:3e:2f:88:40:18:86:fe:a3:f1:
53:44:56:8b:62:02:13:33:b1:fb:d0:a6:39:87:a1:83:09:4e:
3c:54:90:5d:88:38:37:7e:3f:d7:03:01:7a:ee:0e:01:cd:60:
e1:ad:2b:e2:74:fa:ee:74:2f:2f:63:b3:e1:db:ec:b9:53:7a:
0a:cc:78:23:f5:5d:f8:2b:5c:97:13:5a:4d:34:ca:40:f7:58:
72:f0:a1:11:5f:73:a8:66:ff:fc:bc:ed:44:1b:1b:df:c8:39:
ea:ca:1e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org